@openid4vc/oauth2 0.3.0-alpha-20250304095426 → 0.3.0-alpha-20250315153009

package/dist/index.mjs

@@ -98,7 +98,9 @@ async function calculateJwkThumbprint(options) {
 
 // src/callbacks.ts
 var HashAlgorithm = /* @__PURE__ */ ((HashAlgorithm2) => {
-  HashAlgorithm2["Sha256"] = "SHA-256";
+  HashAlgorithm2["Sha256"] = "sha-256";
+  HashAlgorithm2["Sha384"] = "sha-384";
+  HashAlgorithm2["Sha512"] = "sha-512";
   return HashAlgorithm2;
 })(HashAlgorithm || {});
 
@@ -132,13 +134,13 @@ async function isJwkInSet({
   callbacks
 }) {
   const jwkThumbprint = await calculateJwkThumbprint({
-    hashAlgorithm: "SHA-256" /* Sha256 */,
+    hashAlgorithm: "sha-256" /* Sha256 */,
     hashCallback: callbacks.hash,
     jwk
   });
   for (const jwkFromSet of jwks) {
     const jwkFromSetThumbprint = await calculateJwkThumbprint({
-      hashAlgorithm: "SHA-256" /* Sha256 */,
+      hashAlgorithm: "sha-256" /* Sha256 */,
       hashCallback: callbacks.hash,
       jwk: jwkFromSet
     });
@@ -829,7 +831,7 @@ async function createDpopHeadersForRequest(options) {
 async function createDpopJwt(options) {
   let ath = void 0;
   if (options.accessToken) {
-    ath = encodeToBase64Url2(await options.callbacks.hash(decodeUtf8String2(options.accessToken), "SHA-256" /* Sha256 */));
+    ath = encodeToBase64Url2(await options.callbacks.hash(decodeUtf8String2(options.accessToken), "sha-256" /* Sha256 */));
   }
   const header = parseWithErrorHandling4(zDpopJwtHeader, {
     typ: "dpop+jwt",
@@ -883,7 +885,7 @@ async function verifyDpopJwt(options) {
   }
   if (options.accessToken) {
     const expectedAth = encodeToBase64Url2(
-      await options.callbacks.hash(decodeUtf8String2(options.accessToken), "SHA-256" /* Sha256 */)
+      await options.callbacks.hash(decodeUtf8String2(options.accessToken), "sha-256" /* Sha256 */)
     );
     if (!payload.ath) {
       throw new Oauth2Error(`Dpop jwt does not have a ath value, but expected ath value '${expectedAth}'.`);
@@ -894,7 +896,7 @@ async function verifyDpopJwt(options) {
   }
   if (options.expectedJwkThumbprint) {
     const jwkThumprint = await calculateJwkThumbprint({
-      hashAlgorithm: "SHA-256" /* Sha256 */,
+      hashAlgorithm: "sha-256" /* Sha256 */,
       hashCallback: options.callbacks.hash,
       jwk: header.jwk
     });
@@ -1358,7 +1360,7 @@ async function createAccessTokenJwt(options) {
     scope: options.scope,
     cnf: options.dpopJwk ? {
       jkt: await calculateJwkThumbprint({
-        hashAlgorithm: "SHA-256" /* Sha256 */,
+        hashAlgorithm: "sha-256" /* Sha256 */,
         hashCallback: options.callbacks.hash,
         jwk: options.dpopJwk
       })
@@ -1557,7 +1559,7 @@ async function calculateCodeChallenge(options) {
     return options.codeVerifier;
   }
   if (options.codeChallengeMethod === "S256" /* S256 */) {
-    return encodeToBase64Url5(await options.hashCallback(decodeUtf8String4(options.codeVerifier), "SHA-256" /* Sha256 */));
+    return encodeToBase64Url5(await options.hashCallback(decodeUtf8String4(options.codeVerifier), "sha-256" /* Sha256 */));
   }
   throw new Oauth2Error(`Unsupported code challenge method ${options.codeChallengeMethod}`);
 }
@@ -2392,7 +2394,7 @@ async function createAuthorizationRequestUrl(options) {
   } else {
     if (options.dpop) {
       authorizationRequest.dpop_jkt = await calculateJwkThumbprint({
-        hashAlgorithm: "SHA-256" /* Sha256 */,
+        hashAlgorithm: "sha-256" /* Sha256 */,
         hashCallback: options.callbacks.hash,
         jwk: options.dpop.signer.publicJwk
       });